[53] R. Shokri, M. Stronati, C. Song, and V. Shmatikov. Membership inference attacks against machine learning models. In 2017 IEEE symposium on security and privacy (SP), pages 3-18. IEEE, 2017.
[54] S. Song, K. Chaudhuri, and A. D. Sarwate. Stochastic gradient descent with differentially private updates. In 2013 IEEE Global Conference on Signal and Information Processing, pages 245-248. IEEE, 2013.
[55] S. Song, Y. Wang, and K. Chaudhuri. Pufferfish privacy mechanisms for correlated data. In Proceedings of the 2017 ACM International Conference on Management of Data, pages 1291-1306, 2017.
[56] T. Steinke, M. Nasr, and M. Jagielski. Privacy auditing with one (1) training run. arXiv preprint arXiv:2305.08846, 2023.
[57] T. Stevens, I. C. Ngong, D. Darais, C. Hirsch, D. Slater, and J. P. Near. Backpropagation Clipping for Deep Learning with Differential Privacy. arXiv preprint arXiv:2202.05089, 2022.
[58] F. Tramer. Tensorflow privacy issue #153: Incorrect comparison between privacy amplification by iteration and DP-SGD. https://github.com/tensorflow/privacy/issues/153, 2020.
[59] F. Tramér, R. Shokri, A. San Joaquin, H. Le, M. Jagielski, S. Hong, and N. Carlini. Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets. In Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security, CCS '22, page 2779-2792, New York, NY, USA, 2022. Association for Computing Machinery. ISBN 9781450394505. doi: 10.1145/3548606.3560554. URL https://doi.org/10.1145/3548606.3560554.
[60] F. Tramer, A. Terzis, T. Steinke, S. Song, M. Jagielski, and N. Carlini. Debugging differential privacy: A case study for privacy auditing. arXiv preprint arXiv:2202.12219, 2022.
[61] A. Triastcyn and B. Faltings. Bayesian Differential Privacy for Machine Learning. In International Conference on Machine Learning, pages 9583-9592. PMLR, 2020.
[62] M. C. Tschantz, D. Kaynar, and A. Datta. Formal verification of differential privacy for interactive systems. Electronic Notes in Theoretical Computer Science, 276:61-79, 2011.
[63] S. Vadhan. The complexity of differential privacy. In Tutorials on the Foundations of Cryptography, pages 347-450. Springer, 2017.
[64] G. Valiant and P. Valiant. Estimating the unseen: improved estimators for entropy and other properties. Journal of the ACM (JACM), 64(6):1-41, 2017.
[65] H. Xiao, K. Rasul, and R. Vollgraf. Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithms. arXiv Preprint, 2017.
[66] B. Yang, I. Sato, and H. Nakagawa. Bayesian Differential Privacy on Correlated Data. In Proceedings of the 2015 ACM SIGMOD international conference on Management of Data, pages 747-762, 2015.
[67] J. Ye, A. Maddi, S. K. Murakonda, V. Bindschaedler, and R. Shokri. Enhanced Membership Inference Attacks against Machine Learning Models. arXiv preprint arXiv:2111.09679, 2021.
[68] S. Yeom, I. Giacomelli, M. Fredrikson, and S. Jha. Privacy Risk in Machine Learning: Analyzing the Connection to Overfitting. In 2018 IEEE 31st computer security foundations symposium (CSF), pages 268-282. IEEE, 2018.
[69] S. Zanella-Béguelin, L. Wutschitz, S. Tople, A. Salem, V. Ruhle, A. Paverd, M. Naseri, and B. Köpf. Bayesian Estimation of Differential Privacy. arXiv preprint arXiv:2206.05199, 2022.